
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e35362e302f32322d3234203d3e20323034373635.roa
File: 3231312e3134392e35362e302f32322d3234203d3e20323034373635.roa (raw, json)
Hash identifier: ne61kX4eO9Dmky+Z0Gx/z6We9wooaFZhgScKQaCoPz0=
Subject key identifier: 17:57:DF:4C:D8:5C:1F:CA:65:B8:A1:D1:D6:6D:E9:7A:2E:45:9B:3E
Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial: 5EC6D231419C1C59DEF48A33F540CAF3FEF59C4D
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e35362e302f32322d3234203d3e20323034373635.roa
Signing time: Wed 06 May 2026 06:41:19 +0000
ROA not before: Wed 06 May 2026 06:36:19 +0000
ROA not after: Wed 05 May 2027 06:41:19 +0000
asID: 204765
IP address blocks: 211.149.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:c6:d2:31:41:9c:1c:59:de:f4:8a:33:f5:40:ca:f3:fe:f5:9c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Validity
Not Before: May 6 06:36:19 2026 GMT
Not After : May 5 06:41:19 2027 GMT
Subject: CN=1757DF4CD85C1FCA65B8A1D1D66DE97A2E459B3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e0:a4:04:18:01:92:e1:3a:2f:87:a9:a5:10:
25:0d:9d:11:d3:c1:fe:84:db:71:04:6f:c1:67:bf:
9e:2d:0a:e0:9c:a3:62:b9:00:5c:ed:65:97:7e:47:
8d:69:fc:e5:2d:f0:3f:f9:b3:8e:bc:e6:1c:19:27:
17:c6:25:5b:a7:43:5d:ff:2c:1a:cc:d1:0f:49:c7:
27:da:c9:d8:a7:dc:84:74:81:88:90:97:40:ce:b1:
07:cc:56:d9:c8:fd:d7:74:05:44:ef:0d:30:d9:ea:
a4:8f:3f:22:73:8d:bd:31:5e:9d:6a:3c:75:62:f0:
e9:2a:e0:cf:ba:0c:5e:ff:82:ca:c3:6a:72:73:05:
ea:5c:e7:75:46:f5:b8:33:eb:f9:f2:2b:1d:3d:a1:
dd:a7:e8:91:e6:5f:5a:72:4d:11:a8:48:a1:dc:7b:
37:da:d0:77:30:0f:2a:02:bd:72:7b:40:57:57:a8:
83:1a:26:1d:d4:75:4b:7e:9c:39:72:c0:05:28:3a:
5d:4f:ab:bc:ee:f9:0e:af:d6:13:e9:04:1a:b7:b4:
4c:71:2e:1a:8e:45:aa:d8:5d:b8:8e:a6:07:71:24:
5f:27:0c:45:29:0f:d3:d5:86:42:fb:c3:ff:07:56:
38:44:f9:bc:b0:8b:ef:37:57:07:7f:48:31:12:7d:
1a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:57:DF:4C:D8:5C:1F:CA:65:B8:A1:D1:D6:6D:E9:7A:2E:45:9B:3E
X509v3 Authority Key Identifier:
keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e35362e302f32322d3234203d3e20323034373635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.149.56.0/22
Signature Algorithm: sha256WithRSAEncryption
36:c7:4e:f2:54:56:22:10:7f:f3:a3:95:a4:bb:ad:4f:ab:54:
d0:a4:da:30:11:9f:0c:ba:65:01:bc:e7:5f:5f:f8:90:89:20:
c6:ca:72:ff:df:d0:02:10:82:5a:f7:66:0d:58:dc:10:b8:72:
ca:48:b1:72:64:01:ff:32:0a:26:cd:e8:12:ba:4d:72:83:48:
2d:48:54:f9:de:6d:8d:fe:9c:c7:e9:66:3c:ac:bc:b4:47:3c:
c2:3a:6c:0d:61:7f:60:d4:59:37:2e:eb:b0:14:4e:a9:c7:c7:
7c:2e:49:ce:bc:94:1e:91:77:f0:1c:b0:af:9b:f2:88:d0:a3:
88:f4:77:80:99:83:66:13:a9:3f:5d:fc:9e:63:ab:84:f7:1b:
67:04:43:5e:96:0b:bc:28:71:ba:ec:57:a1:6a:bb:ca:eb:28:
cd:c5:6a:79:59:d5:c5:e0:7d:c4:63:8f:dd:8b:8c:73:dc:34:
57:73:84:c8:2a:e3:50:8f:df:03:1c:c6:de:05:b4:bb:b6:54:
7a:aa:68:85:8b:6c:1f:51:ac:9f:ef:80:46:3c:89:67:c7:32:
4a:d8:a7:c0:0c:62:a1:d5:f3:4f:2d:ab:35:f5:11:b5:80:d8:
da:77:a0:5e:ae:0f:c5:4b:73:e3:96:41:88:3f:08:de:0b:26:
8d:59:95:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:56:55 2026 by rpki-client